
$ rpki-client -vvf rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
File: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft (raw, json)
Hash identifier: 8YbZVx+l/AxtcUyd1tAH0j8ygW3jpPjbGQhoqTwz2+4=
Subject key identifier: 1F:AA:F6:94:64:E7:40:4A:63:E6:34:03:66:23:77:12:CD:36:06:EB
Authority key identifier: D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
Certificate issuer: /CN=A911A70E/serialNumber=D439EED60D319709872474B90706630473B6DE5E
Certificate serial: 0269
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
Manifest number: 025C
Signing time: Wed 25 Mar 2026 01:43:54 +0000
Manifest this update: Wed 25 Mar 2026 01:43:53 +0000
Manifest next update: Wed 01 Apr 2026 01:43:53 +0000
Files and hashes: 1: 1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl (hash: xUFQCjnCb1M7bQDrHod/qTWQL7bJbj4ThTT0ZDOy3Sc=)
2: 5169DA6EA05D11ED9406DE26C4F9AE02.roa (hash: s7Oir+kBK6V7D0xuqpSVbybxeozVx8Hx3+pya2RC/X0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 01:43:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 617 (0x269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911A70E, serialNumber=D439EED60D319709872474B90706630473B6DE5E
Validity
Not Before: Mar 25 01:43:53 2026 GMT
Not After : Apr 1 01:43:53 2026 GMT
Subject: CN=69c33dda-845c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:96:2e:de:51:91:7a:53:81:26:43:b9:f1:
8d:2f:19:d5:2a:8b:b9:42:19:b6:9f:3d:36:46:ba:
22:f6:d6:aa:db:3c:12:f0:09:5e:6d:e5:47:21:ff:
ac:25:d9:a5:62:4a:24:a4:b4:63:e9:80:b4:01:5d:
33:59:1d:96:b8:60:c3:a9:7a:2d:4f:57:ea:d8:b2:
e8:72:bb:65:87:60:96:ec:84:2d:4e:3b:85:07:99:
43:8e:76:1b:81:87:8d:43:00:f3:f3:56:36:8d:28:
05:d3:bb:60:e4:c8:1f:4d:40:99:b2:ff:c0:44:2e:
ae:ee:fe:15:2d:0a:b7:ac:c7:52:fa:16:49:72:24:
cf:9f:38:0f:eb:3d:ae:76:f8:e0:85:fc:16:c0:5a:
a2:06:74:87:72:c7:23:f7:c6:60:3e:8c:af:7d:b0:
43:c6:18:1b:a3:e1:9a:cf:e6:28:03:d3:27:b9:fe:
fb:07:d6:6f:7e:65:5f:15:19:5b:7a:38:c2:8b:e5:
f7:68:38:5b:ff:1b:9b:59:32:23:d4:58:6c:8f:e1:
d4:9c:cf:d3:4b:ec:a1:57:9b:32:bf:40:8e:01:25:
3e:f7:55:88:c3:89:2b:a2:bf:55:02:8c:64:3c:8d:
06:82:66:5b:96:b6:d4:b8:9c:e0:c5:8b:6d:7b:35:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:F6:94:64:E7:40:4A:63:E6:34:03:66:23:77:12:CD:36:06:EB
X509v3 Authority Key Identifier:
keyid:D4:39:EE:D6:0D:31:97:09:87:24:74:B9:07:06:63:04:73:B6:DE:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Dnu1g0xlwmHJHS5BwZjBHO23l4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A70E/00083FAC9D5711ED9F989530C4F9AE02/1Dnu1g0xlwmHJHS5BwZjBHO23l4.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
16:2d:10:d7:f5:81:05:65:52:f1:51:4e:81:87:d5:a6:27:8d:
29:fb:4a:d5:a9:ee:a4:ab:0d:e8:ee:4c:fe:ab:09:03:cf:a8:
53:4c:5c:fb:92:1e:72:97:43:b2:11:25:a9:9c:21:ea:87:6a:
ad:61:11:3a:62:7d:c0:85:34:dc:91:2b:e4:05:43:75:64:8e:
a8:e1:a9:e7:27:b4:6d:68:af:ae:d8:4c:4a:88:b0:3f:60:07:
fb:11:4f:e5:be:df:6b:4f:74:e3:e5:e6:8b:f6:7f:10:df:49:
ba:3a:1c:9d:c7:7a:3d:eb:0a:ab:ea:9e:35:f2:0e:f6:d6:a6:
fd:00:b3:c5:7a:57:4c:7c:b5:54:17:21:a8:1e:ab:55:84:de:
1a:15:5b:d0:c2:1e:91:8a:b6:27:5d:43:2d:e2:da:74:da:ad:
81:3e:e7:aa:df:be:8a:37:e1:5b:75:88:31:69:04:4c:a4:bd:
24:8d:0e:b2:90:3e:a5:36:b2:26:d5:0c:6e:9b:47:46:bf:ed:
ff:42:12:76:3d:59:6e:5b:e2:c6:a6:c0:ea:93:38:3f:c0:73:
30:22:8c:a0:9f:cd:78:70:9c:f1:da:84:1c:33:4b:09:99:e5:
61:bc:6e:10:6f:4c:77:e6:1c:b2:19:1a:be:f9:db:40:96:98:
4d:bc:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:40 2026 by rpki-client